Bret Comnes

@GHchangelog How many packages would 3 days catch that 1 day didn't catch?

Dependabot now delays version update PRs until new releases have been available for at least three days by default. • Security update PRs open immediately without delay. github.blog/changelog/2026…

@zeeg just hang some pictures and clean off your bench

this def aint podcast vibes.. gotta figure out if i use a diff room (ugh) or tweak how id use this one

@sean_j_roberts @burkeholland wth

@burkeholland household or individual?

Adjusted for inflation (CPI includes rent), Gen Z has higher income than any previous generations did at their age. apple.news/AXqjDXq2ESbuOS…

@AlpinDale Apparently json is a compression method now

HTMX is not web scale

@antirez Every time I do read it there are glaring and obvious structural and maintainability defects.

It is my belief that many devs right now are not maximizing what they can do with automatic programming because they still look at the code. Doing it makes you the bottleneck. Your time is better invested in new ideas, QA, design, and asking yourself what is your goal.

@swyx If unsubsidized costs remain realistic, it will take a lot of risk out of developing ideas into software

if you only learned about jevons paradox primarily wrt software demand in the age of agentic engineering, you may not have fully internalized jevons parodox’s impact under the conditions of: - humans who can wield coding agents well* - coding agents breaking containment to all other knowledge work as the efficiency of labor goes up/unit cost of knowledge work goes broadly down, the demand for total work and better knowledge goes up, not down. what happened to coding isnt the exception; it’s the herald. *aka AI Engineers

@PalmerLuckey What was good about it?

Fun fact: The final and fully-perfected version of the Nintendo 64 hardware was the LodgeNet 64, a system that allowed hotels to rent out N64s by the minute, straight to your room! The ModRetro M64 and M64 Pro controller include hardware and software options based on LodgeNet!

@beerplusplus Had one today

I want affogato so bad 😭

🚨 BREAKING: Socket has identified a supply chain attack targeting the popular jscrambler npm package. The compromised jscrambler@8.14.0 release uses a malicious preinstall hook to execute hidden Windows, macOS, or Linux binaries during npm install.

@zeeg Does drizzle require a specific migration system? I think even github.com/MattiLehtinen/… supports this.

I wish drizzle-kit would let me insert typescript migrations so I could bundle all sorts of data migrations that cant be done exclusively with SQL Django made this nice and simple

@htmx_org 😬

/r/webdev continues to deliver the goods

@andreintg @AntonMigulko The case looks cool, but in fact it's overpriced, flimsy, and quite a PITA to make. Worst case I've ever worked with. Quite the opposite of good design.

@AntonMigulko we can't have enough designers inspired by Teenage Engineering : D

These guys are making a universal laser cut enclosure with a custom pcb for repurposed old cd-drives. The project is called CD-ROM PLAYER-01, by das_POD.

i dunno what this guy does for a living but he should be a head of qa making 7 figures

Why does it seem like the smallest things are so difficult and impossible these days

@kenwheeler Yes. If it’s ai you can just keep asking “who” and it gets stuck on a loop

at first i was like wait what, and tried to verify it like who’s your department head? which campus are you in? and they just hang up.

have any of you guys seen this new scam where the whitest dude alive calls and is like “hi this is ritchie anderson from google account security” but it’s clearly bullshit and they get VERY upset when you call them on it

45 years ago... ESCAPE FROM NEW YORK

Extremely important change

Use npm v12 to mitigate some of the supply chain attacks! this should be read by anyone who runs any npm related software

@notch Learning it sucks, and the ecosystem by and large sucks, but it eliminates entire classes of errors and mistakes and it helps keep LLMs on rails.

TypeScript is an insane quagmire for absolutely no benefit beyond documentation.